Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File:                     5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier:          9nNvhr+OnkkvW95nkZu/lbidt94tTlW9aaC1Gghb4mM=
Subject key identifier:   19:E1:85:66:7C:45:E9:C2:14:F8:4A:7F:04:F2:AD:1A:1B:82:4D:28
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer:       /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial:       01962ECF7A79380BBE8CDA77FCF3E817FDC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number:          0B41
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: 0I90jYLDsjsh8A1WdLN05NbEjj4.roa (hash: Kf+mfo5G5myFzzGKcZGygmTNr3GGZjTxsLuEcsJyKBc=)
                          2: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: cTo2MfAqP7LTV0CZ4nZr9azcTzIDTMeQ5jjKuDIYYuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7a:79:38:0b:be:8c:da:77:fc:f3:e8:17:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=19e185667c45e9c214f84a7f04f2ad1a1b824d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0a:01:ac:4e:b0:8e:c5:0b:66:6a:1c:2d:84:
                    2a:8c:82:28:15:59:0c:39:f6:87:67:54:40:2c:6d:
                    cb:3d:78:09:ed:25:6f:0e:3a:35:01:1f:79:27:b5:
                    63:be:cf:b5:fb:b0:47:10:14:f8:9d:4b:61:fe:66:
                    c8:10:8d:ed:81:5e:2a:78:bd:3f:aa:8f:c4:a1:b2:
                    71:27:5b:c4:db:b8:56:55:73:17:46:05:be:2b:b1:
                    71:5b:8d:0c:76:7c:48:44:c4:ac:89:15:d6:e1:74:
                    1f:1a:09:a7:f6:ed:1c:d6:b8:b2:0c:95:9d:45:9e:
                    99:5e:22:22:0c:49:54:5c:5f:da:8b:21:26:45:cd:
                    dc:76:47:50:c2:61:1d:4e:a7:67:28:d6:50:6a:0b:
                    d5:52:4d:84:a2:c3:42:4a:c5:56:f7:a1:8d:1a:66:
                    6e:d8:db:7f:1d:43:f3:16:1d:5c:ce:36:b6:0b:0b:
                    a2:8b:a1:f2:ba:50:d8:94:a7:8b:3f:69:fa:c3:2f:
                    f4:12:51:c7:46:01:18:7d:60:59:eb:98:89:f1:4e:
                    52:84:85:f6:a7:82:55:4e:db:c3:e5:39:5f:3c:09:
                    a6:42:a4:6a:a9:52:c7:cc:3e:a8:71:98:c6:fe:64:
                    c1:60:06:88:6f:4c:d7:37:87:08:fd:d0:69:3b:5a:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E1:85:66:7C:45:E9:C2:14:F8:4A:7F:04:F2:AD:1A:1B:82:4D:28
            X509v3 Authority Key Identifier:
                keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:b9:bc:92:82:a4:92:81:b5:15:cd:4f:b9:16:a9:0d:2d:6e:
         9f:14:b5:81:10:c8:22:b7:5a:2f:53:ca:74:a5:81:b8:e6:83:
         70:d5:29:d0:c2:cd:9c:f7:2a:cc:84:52:50:ca:37:85:6d:b1:
         53:3c:f4:53:9f:e7:cc:4d:97:b6:59:21:50:68:11:a0:c7:03:
         1d:f1:24:5d:14:41:83:19:3e:5a:17:6e:1f:cf:70:e7:fe:e8:
         02:73:0a:5c:d7:21:69:69:81:c1:f0:e6:98:f5:05:80:c4:41:
         d2:6d:01:db:77:c1:19:89:17:99:ab:05:92:45:25:02:84:48:
         14:15:cc:03:0b:f1:ed:c3:e2:88:3a:c5:ee:23:3a:66:be:37:
         93:b7:65:d9:2a:d3:ac:7e:1e:75:01:dd:55:4a:c4:ce:90:ba:
         5c:fa:ab:ae:e2:e3:69:11:de:21:32:1c:79:75:8a:91:e0:a7:
         0a:2e:8c:bf:1a:8e:fa:73:60:da:ee:f0:7b:69:39:47:15:ff:
         0b:4f:d3:5b:37:96:db:84:08:04:dd:0d:e4:8b:8e:c3:29:0c:
         f8:4b:aa:92:c7:c6:e1:e5:02:14:e2:ec:98:a4:ae:30:d8:17:
         6c:88:1d:11:7e:b2:5b:a4:fe:d7:a4:51:48:93:27:1c:f7:0b:
         ac:1a:78:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz3p5OAu+jNp3/PPoF/3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDlmNzYyZTA4MmVhZDNkNmQ3ZTRjYWUyOWVmYmI0ZDEy
ZjU3NWUwHhcNMjUwNDEzMTEwMTExWhcNMjUwNDE0MTEwMTExWjAzMTEwLwYDVQQD
EygxOWUxODU2NjdjNDVlOWMyMTRmODRhN2YwNGYyYWQxYTFiODI0ZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AoBrE6wjsULZmocLYQqjIIoFVkM
OfaHZ1RALG3LPXgJ7SVvDjo1AR95J7Vjvs+1+7BHEBT4nUth/mbIEI3tgV4qeL0/
qo/EobJxJ1vE27hWVXMXRgW+K7FxW40MdnxIRMSsiRXW4XQfGgmn9u0c1riyDJWd
RZ6ZXiIiDElUXF/aiyEmRc3cdkdQwmEdTqdnKNZQagvVUk2EosNCSsVW96GNGmZu
2Nt/HUPzFh1czja2Cwuii6HyulDYlKeLP2n6wy/0ElHHRgEYfWBZ65iJ8U5ShIX2
p4JVTtvD5TlfPAmmQqRqqVLHzD6ocZjG/mTBYAaIb0zXN4cI/dBpO1ql5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnhhWZ8RenCFPhKfwTyrRobgk0oMB8GA1UdIwQY
MBaAFOcJ92LggurT1tfkyuKe+7TRL1deMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjIt
YWU0ZmE3ZjE3ZjljLzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYmRhNGEtNWMxMC00NGRiLThmNjItYWU0ZmE3ZjE3Zjlj
LzEvNXduM1l1Q0M2dFBXMS1USzRwNzd0TkV2VjE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLm8koKk
koG1Fc1PuRapDS1unxS1gRDIIrdaL1PKdKWBuOaDcNUp0MLNnPcqzIRSUMo3hW2x
Uzz0U5/nzE2XtlkhUGgRoMcDHfEkXRRBgxk+WhduH89w5/7oAnMKXNchaWmBwfDm
mPUFgMRB0m0B23fBGYkXmasFkkUlAoRIFBXMAwvx7cPiiDrF7iM6Zr43k7dl2SrT
rH4edQHdVUrEzpC6XPqrruLjaRHeITIceXWKkeCnCi6MvxqO+nNg2u7we2k5RxX/
C0/TWzeW24QIBN0N5IuOwykM+EuqksfG4eUCFOLsmKSuMNgXbIgdEX6yW6T+16RR
SJMnHPcLrBp4MQ==
-----END CERTIFICATE-----